fix: apply assignment to proper account (#296)

cds-snc · Jul 11, 2024 · 4ac7a51 · 4ac7a51
1 parent 4ab5942
commit 4ac7a51
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/terragrunt/org_account/iam_identity_center/platform_cds_website_assignments.tf b/terragrunt/org_account/iam_identity_center/platform_cds_website_assignments.tf
@@ -23,6 +23,11 @@ locals {
       group          = aws_identitystore_group.canadian_digital_service_production_website_admin,
       permission_set = aws_ssoadmin_permission_set.canadian_digital_service_production_website_admin,
     },
+    # ! Cross Account Permission Assignment - Notify Hosted Zone
+    {
+      group          = aws_identitystore_group.notify_production_hosted_zone_admin,
+      permission_set = aws_ssoadmin_permission_set.admin_route53_notify_hosted_zone,
+    }
   ]
   # CdsWebsite-Production
   cds_website_production_permission_sets = [

diff --git a/terragrunt/org_account/iam_identity_center/platform_notify_assignments.tf b/terragrunt/org_account/iam_identity_center/platform_notify_assignments.tf
@@ -35,10 +35,6 @@ locals {
     {
       group          = aws_identitystore_group.notify_production_read_only,
       permission_set = data.aws_ssoadmin_permission_set.aws_read_only_access,
-    },
-    {
-      group          = aws_identitystore_group.notify_production_hosted_zone_admin,
-      permission_set = aws_ssoadmin_permission_set.admin_route53_notify_hosted_zone,
     }
   ]
   # Notification-Staging